Static task
static1
Behavioral task
behavioral1
Sample
d21d0536b400d14673e3f89e40f0808bb99b476e4adce6bf434217b6c2c2a394.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d21d0536b400d14673e3f89e40f0808bb99b476e4adce6bf434217b6c2c2a394.exe
Resource
win10v2004-20220812-en
General
-
Target
d21d0536b400d14673e3f89e40f0808bb99b476e4adce6bf434217b6c2c2a394
-
Size
247KB
-
MD5
279beb376a8feee16da95d9e511bf20c
-
SHA1
c115d19102d4392913346050d7a0be678aac6b5f
-
SHA256
d21d0536b400d14673e3f89e40f0808bb99b476e4adce6bf434217b6c2c2a394
-
SHA512
95828bcfcca6969eaddcb7416aacfd7c58a52fe5a1541a713e70e33ae993cf702fbc87223cc171a7b36cb314f3876d195c5207273a6594d07996c203551aa736
-
SSDEEP
6144:8QoEmiBVncabrN5c0T7z73+wjul6uLH+o:8QojiBRcabrN59XL5w
Malware Config
Signatures
Files
-
d21d0536b400d14673e3f89e40f0808bb99b476e4adce6bf434217b6c2c2a394.exe windows x86
cdf750ca703447da88bc41c450e1c692
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
BitBlt
GetClipBox
GetBitmapBits
SetTextColor
SetBkMode
kernel32
HeapAlloc
VirtualFree
SetEvent
lstrcpynA
GetDiskFreeSpaceA
ExitThread
GetACP
InitializeCriticalSection
LoadLibraryA
SetHandleCount
GetOEMCP
ExitProcess
GetVersionExA
VirtualAllocEx
GetDateFormatA
VirtualAlloc
GetCommandLineW
GlobalAddAtomA
LocalAlloc
GetVersion
WideCharToMultiByte
GetLastError
GetSystemDefaultLangID
GetThreadLocale
GetEnvironmentStrings
GetCurrentThreadId
GetLocaleInfoA
LoadLibraryExA
GetUserDefaultLCID
SetThreadLocale
GetProcAddress
SizeofResource
GetCommandLineA
GetModuleHandleA
LockResource
IsBadHugeReadPtr
GetStringTypeW
GlobalAlloc
SetFilePointer
GetFileAttributesA
IsBadReadPtr
version
GetFileVersionInfoA
comdlg32
GetSaveFileNameA
FindTextA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
advapi32
RegEnumValueA
RegCreateKeyExA
RegQueryInfoKeyA
ole32
StgOpenStorage
CoCreateInstanceEx
CreateOleAdviseHolder
WriteClassStm
StgCreateDocfileOnILockBytes
PropVariantClear
oleaut32
OleLoadPicture
VariantChangeType
SafeArrayCreate
VariantCopyInd
SysFreeString
user32
DrawIconEx
EnumWindows
CharNextA
CallWindowProcA
CharNextW
GetCursor
DeleteMenu
DefWindowProcA
GetFocus
GetDC
CreateIcon
DestroyIcon
GetCapture
GetDesktopWindow
DrawIcon
GetClassInfoA
GetCursorPos
DefMDIChildProcA
CharToOemA
DestroyMenu
CharLowerA
DrawMenuBar
CallNextHookEx
DispatchMessageA
FindWindowA
AdjustWindowRectEx
ChildWindowFromPoint
DrawEdge
DrawFrameControl
Sections
CODE Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES44 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES93 Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES50 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES16 Size: 1024B - Virtual size: 1023B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES70 Size: 1024B - Virtual size: 959B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES51 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES20 Size: 1024B - Virtual size: 967B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES08 Size: 1024B - Virtual size: 715B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ